Re: xsoldier update for Linux Mandrake

[lwc () VAPID DHS ORG (Cashdollar, Larry)]

> Great little shoot 'em up game in the style of galaga. Very neat
> graphics, but there's no sound support yet.

I actually wrote an exploit for this and posted it on VUL-DEV.  The
exploit would get egid 12 (games) if I had bothered to put a setregid()
call in the shellcode.  My attempts had failed.  It will however get euid
0 from a default source installation that placed xsoldier in
/usr/local/games as setuid root.

I didnt think it was interesting enough to post on bugtraq, but since this
came up here is a link to the exploit if anyone wants to toy with it.

http://vapid.dhs.org/xsol-x.c

-- Larry